# changelog

author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.108.0.135
changelog:
  - !1838  fix CVE-2023-20593 for openEuler
  - tools arch x86: Sync the msr-index.h copy with the kernel sources
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  - x86/cpu/amd: Add a Zenbleed fix
  - x86/cpu/amd: Move the errata checking functionality up
  - x86/cpu: Restore AMD's DE_CFG MSR after resume
  - !1775 [sync] PR-1729:  fix CVE-2023-4128 in OLK510
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.109.0.136
changelog:
  - !1891 [sync] PR-1784:  tun/tap: fix CVE-2023-4194
  - !1885 [sync] PR-1815:  Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1866 [sync] PR-1821:  nbd: pass nbd_sock to nbd_read_reply() instead of index
  - !1780 [sync] PR-1766:  xen/netback: Fix buffer overrun triggered by unusual packet
  - !1888 [sync] PR-1835:  tcp: Reduce chance of collisions in inet6_hashfn().
  - net: tap_open(): set sk_uid from current_fsuid()
  - net: tun_chr_open(): set sk_uid from current_fsuid()
  - tcp: Reduce chance of collisions in inet6_hashfn().
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
  - !1827 [sync] PR-1813:  ksmbd: fix cve-2023-38432
  - nbd: pass nbd_sock to nbd_read_reply() instead of index
  - ksmbd: validate command request size
  - ksmbd: validate command payload size
  - xen/netback: Fix buffer overrun triggered by unusual packet


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.110.0.137
changelog:
  - !2002 [sync] PR-1911:  ksmbd: fix out-of-bound read in smb2_write
  - !1626 [sync] PR-1621:  fix three CVEs by backport mainline patchs
  - !1817 [sync] PR-1788:  exfat: check if filename entries exceeds max filename length
  - ksmbd: fix out-of-bound read in smb2_write
  - !1979 [sync] PR-1446:  Fix the default return value of dm_pool_dec_data_range()
  - Fix the default return value of dm_pool_dec_data_range()
  - !1384 [sync] PR-1346:  dm thin metadata: check fail_io before using data_sm
  - exfat: check if filename entries exceeds max filename length
  - ksmbd: fix racy issue from session setup and logoff
  - ksmbd: Fix spelling mistake "excceed" -> "exceeded"
  - ksmbd: limit pdu length size according to connection status
  - ksmbd: Implements sess->ksmbd_chann_list as xarray
  - dm thin metadata: check fail_io before using data_sm


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.111.0.138
changelog:
  - !2143 [sync] PR-2126:  netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2107 [sync] PR-2090:  net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - !2105 [sync] PR-2092:  netfilter: nf_tables: skip bound chain on rule flush
  - !2108 [sync] PR-2085:  af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - !2113 [sync] PR-2097:  Fixed 4 CVEs of the ksmbd
  - !1779  nvme-pci: clear the prp2 field when not used
  - !2081 [sync] PR-2065:  dm: switch to precise io accounting
  - ksmbd: not allow guest user on multichannel
  - ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
  - ksmbd: block asynchronous requests when making a delay on session setup
  - ksmbd: destroy expired sessions
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  - netfilter: nf_tables: skip bound chain on rule flush
  - !1925 [sync] PR-1883:  SUNRPC: don't pause on incomplete allocation
  - !1748 [sync] PR-1649: Enable TPM TIS customization
  - !1747 [sync] PR-1646: Fixed extioi hardware emulation bugs on loongarch
  - dm: switch to precise io accounting
  - !2057 [sync] PR-2055: Only enable unicast promisc when mac table full to fix the hns3 bug
  - SUNRPC: don't pause on incomplete allocation
  - net: hns3: only enable unicast promisc when mac table full
  - !2047 [sync] PR-1752:  ksmbd: validate session id and tree id in the compound request
  - ksmbd: validate session id and tree id in the compound request
  - nvme-pci: clear the prp2 field when not used
  - loongarch/config: Enable TPM TIS customization
  - loongarch/kvm: Fixed extioi hardware emulation bugs


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.112.0.139
changelog:
  - !2214 [sync] PR-2210:  jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2231 [sync] PR-2086:  fix CVE-2023-20588
  - !2239 [sync] PR-2169:  net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2242 [sync] PR-2230:  media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - !2237  x86/speculation: Add force option to GDS mitigation
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  - !2041 [sync] PR-1786: LoongArch: export lsx/lasx related struct to user space
  - x86: Move gds_ucode_mitigated() declaration to header
  - Documentation/x86: Fix backwards on/off logic about YMM support
  - KVM: Add GDS_NO support to KVM
  - x86/speculation: Add Kconfig option for GDS
  - x86/speculation: Add force option to GDS mitigation
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt
  - x86/CPU/AMD: Do not leak quotient data after a division by 0
  - !1877 [sync] PR-1826:  x86/speculation: Add Gather Data Sampling mitigation
  - jbd2: Fix potential data lost in recovering journal raced with synchronizing fs bdev
  - !2170 [sync] PR-2153:  netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  - !2149 [sync] PR-2095:  io_uring: ensure IOPOLL locks around deferred work
  - io_uring: ensure IOPOLL locks around deferred work
  - LoongArch: export lsx/lasx related struct to user space
  - x86/speculation: Add cpu_show_gds() prototype
  - x86/speculation: Add Gather Data Sampling mitigation


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.113.0.140
changelog:
  - !2391  netfilter: nf_tables: disallow rule removal from chain binding
  - netfilter: nf_tables: disallow rule removal from chain binding
  - !2389  nf_table LTS
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
  - netfilter: nf_tables: skip bound chain on rule flush
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  - netfilter: nf_tables: drop map element references from preparation phase
  - netfilter: nftables: rename set element data activation/deactivation functions
  - netfilter: nf_tables: reject unbound chain set before commit phase
  - netfilter: nf_tables: reject unbound anonymous set before commit phase
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
  - netfilter: nf_tables: fix chain binding transaction logic
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  - netfilter: nf_tables: use net_generic infra for transaction data
  - Revert "netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID"
  - Revert "netfilter: nf_tables: skip bound chain on rule flush"
  - Revert "netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE"
  - Revert "netfilter: nf_tables: fix chain binding transaction logic"
  - Revert "netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain"
  - Revert "netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR"
  - Revert "netfilter: nf_tables: unbind non-anonymous set if rule construction fails"
  - !2378 [sync] PR-2359:  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
  - !2299 [sync] PR-2287:  scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - !2297 [sync] PR-2286:  scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
  - !2273 [sync] PR-2156:  drm: add inspur drm driver support
  - !2238 [sync] PR-2163:  Fix the two problems when using binutil 2.41.
  - !2277 [sync] PR-2269:  etmem: Fixed an issue where the module reference counting is incorrect
  - etmem: Fixed an issue where the module reference counting is incorrect
  - !2124 [sync] PR-1778:  nvme-pci: fix DMA direction of unmapping integrity data
  - !2186  nvme-pci: fix timeout request state check
  - !2188  nvme-pci: fix mempool alloc size
  - drm: add inspur drm driver support
  - !2249 [sync] PR-2224:  ext4: fix rec_len verify error
  - ext4: fix rec_len verify error
  - LoongArch: Fix module relocation error with binutils 2.41
  - LoongArch: Fix the write_fcsr() macro
  - nvme-pci: fix mempool alloc size
  - nvme-pci: fix timeout request state check
  - nvme-pci: fix DMA direction of unmapping integrity data


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.114.0.141
changelog:
  - !2420 [sync] PR-2323:  net/sched: Retire rsvp classifier
  - net/sched: Retire rsvp classifier
  - !2366 [sync] PR-2282:  sdei_watchdog: Avoid exception during sdei handler
  - sdei_watchdog: Avoid exception during sdei handler


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.115.0.142
changelog:
  - !2690 [sync] PR-2666:  net: xfrm: Fix xfrm_address_filter OOB read
  - !2373 [sync] PR-2258:  ext4: do not mark inode dirty every time when appending using delalloc
  - !2637 [sync] PR-2454:  igb: set max size RX buffer when store bad packet is enabled
  - net: xfrm: Fix xfrm_address_filter OOB read
  - !2535 [sync] PR-2370:  ipv4: fix null-deref in ipv4_link_failure
  - !2524 [sync] PR-2440:  netfilter: xt_u32: validate user space input
  - !2530 [sync] PR-2411:  netfilter: xt_sctp: validate the flag_info count
  - !2527 [sync] PR-2410:  netfilter: nfnetlink_osf: avoid OOB read
  - !2658 [sync] PR-2628:  ubi: Refuse attaching if mtd's erasesize is 0
  - !2663  arm64: fix a concurrency issue in emulation_proc_handler()
  - arm64: armv8_deprecated: fix unused-function error
  - arm64: armv8_deprecated: rework deprected instruction handling
  - arm64: armv8_deprecated: move aarch32 helper earlier
  - arm64: armv8_deprecated move emulation functions
  - arm64: armv8_deprecated: fold ops into insn_emulation
  - arm64: rework EL0 MRS emulation
  - arm64: factor insn read out of call_undef_hook()
  - arm64: factor out EL1 SSBS emulation hook
  - arm64: split EL0/EL1 UNDEF handlers
  - arm64: allow kprobes on EL0 handlers
  - arm64: rework BTI exception handling
  - arm64: rework FPAC exception handling
  - arm64: consistently pass ESR_ELx to die()
  - arm64: die(): pass 'err' as long
  - arm64: report EL1 UNDEFs better
  - Revert "arm64: fix a concurrency issue in emulation_proc_handler()"
  - ubi: Refuse attaching if mtd's erasesize is 0
  - !2647 [sync] PR-2641:  Fix CVE-2023-5717
  - perf: Fix kabi breakage in struct perf_event
  - perf: Disallow mis-matched inherited group reads
  - !2563  fix cgroup poll UAF
  - !2519 [sync] PR-2437:  crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2558  USB: ene_usb6250: Allocate enough memory for full object
  - igb: set max size RX buffer when store bad packet is enabled
  - !2595 [sync] PR-2573:  media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - !2566 [sync] PR-2557:  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - !2580 [sync] PR-2476:  Fixed five CVEs vulnerabilities of ksmbd
  - !2613  CVE-2022-44033
  - char: pcmcia: remove all the drivers
  - tty: ipwireless: move Kconfig entry to tty
  - !2552  scsi: mpt3sas: Driver patch set for openEuler-22.03-LTS
  - !2584 [sync] PR-2571:  xen/events: replace evtchn_rwlock with RCU
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
  - xen/events: replace evtchn_rwlock with RCU
  - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN
  - ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
  - ksmbd: send proper error response in smb2_tree_connect()
  - ksmbd: fix racy issue from smb2 close and logoff with multichannel
  - ksmbd: call rcu_barrier() in ksmbd_server_exit()
  - ksmbd: fix racy issue under cocurrent smb2 tree disconnect
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  - sched/psi: Select KERNFS as needed
  - kernfs: add stub helper for kernfs_generic_poll()
  - sched/psi: use kernfs polling functions for PSI trigger polling
  - USB: ene_usb6250: Allocate enough memory for full object
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0
  - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
  - scsi: mpt3sas: Remove usage of dma_get_required_mask() API
  - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix
  - scsi: mpt3sas: Don't change DMA mask while reallocating pools
  - scsi: mpt3sas: Fix a memory leak
  - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
  - scsi: mpt3sas: Fix use-after-free warning
  - ipv4: fix null-deref in ipv4_link_failure
  - netfilter: xt_sctp: validate the flag_info count
  - netfilter: nfnetlink_osf: avoid OOB read
  - netfilter: xt_u32: validate user space input
  - !1561 Add ACS quirk for Wangxun NICs
  - !2514 [sync] PR-2499:  f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - crypto: drbg - Only fail when jent is unavailable in FIPS mode
  - !2485 [sync] PR-2340:  xfs: recent patches to fix xfs issues
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
  - xfs: update the last_sync_lsn with ctx start lsn
  - xfs: shutdown xfs once inode double free
  - xfs: fix off-by-one-block in xfs_discard_folio()
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range
  - iomap: buffered write failure should not truncate the page cache
  - xfs,iomap: move delalloc punching to iomap
  - xfs: use byte ranges for write cleanup ranges
  - xfs: punching delalloc extents on write failure is racy
  - xfs: longest free extent no need consider postalloc
  - xfs: fix xfs shutdown since we reserve more blocks in agfl fixup
  - xfs: block reservation too large for minleft allocation
  - xfs: set minleft correctly for randomly sparse inode allocations
  - xfs: shutdown to ensure submits buffers on LSN boundaries
  - xfs: don't verify agf length when log recovery
  - xfs: Remove redundant assignment to busy
  - xfs: remove redundant pointer lip
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf
  - xfs: xfs_trans_cancel() path must check for log shutdown
  - xfs: fix bounds check in xfs_defer_agfl_block()
  - xfs: AGF length has never been bounds checked
  - xfs: journal geometry is not properly bounds checked
  - xfs: don't block in busy flushing when freeing extents
  - xfs: allow extent free intents to be retried
  - xfs: pass alloc flags through to xfs_extent_busy_flush()
  - Revert "xfs: propagate the return value of xfs_log_force() to avoid soft lockup"
  - xfs: use deferred frees for btree block freeing
  - xfs: don't reverse order of items in bulk AIL insertion
  - xfs: validate block number being freed before adding to xefi
  - xfs: validity check agbnos on the AGFL
  - xfs: pass xfs_extent_free_item directly through the log intent code
  - xfs: remove unused parameter from refcount code
  - xfs: reduce the size of struct xfs_extent_free_item
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later
  - xfs: create slab caches for frequently-used deferred items
  - xfs: compact deferred intent item structures
  - xfs: rename _zone variables to _cache
  - xfs: remove kmem_zone typedef
  - xfs: remove xfs_setattr_time() declaration
  - xfs: use setattr_copy to set vfs inode attributes
  - xfs: set prealloc flag in xfs_alloc_file_space()
  - xfs: don't assert fail on perag references on teardown
  - xfs: fix dir3 block read verify fail during log recover
  - xfs: propagate the return value of xfs_log_force() to avoid soft lockup
  - xfs: keep growfs sb log item active until ail flush success
  - !1141 [sync] PR-953:  xfs: fixes patchs and backport patchs
  - PCI: Add ACS quirk for Wangxun NICs
  - ext4: do not mark inode dirty every time when appending using delalloc
  - Revert "openeuler: pci: workaround multiple functions can be assigned to only one VM"
  - xfs: atomic drop extent entries when inactiving attr
  - xfs: factor out __xfs_da3_node_read()
  - xfs: fix a UAF in xfs_iflush_abort_clean
  - xfs: fix a UAF when inode item push
  - xfs: fix the problem of mount failure caused by not refreshing mp->m_sb
  - iomap: iomap: fix memory corruption when recording errors during writeback
  - xfs: fix hung when transaction commit fail in xfs_inactive_ifree
  - xfs: fix dead loop when do mount with IO fault injection
  - xfs: fix ag count overflow during growfs
  - xfs: account extra freespace btree splits for multiple allocations
  - xfs: force shutdown xfs when xfs_attr_inactive fails
  - xfs: fix negative array access in xfs_getbmap
  - xfs: fix BUG_ON in xfs_getbmap()
  - xfs: use iomap_valid method to detect stale cached iomaps
  - iomap: write iomap validity checks
  - xfs: write page faults in iomap are not buffered writes
  - xfs: fix exception caused by unexpected illegal bestcount in leaf dir
  - Revert "[Huawei] xfs: fix uaf when leaf dir bestcount not match with dir data blocks"
  - xfs: don't expose internal symlink metadata buffers to the vfs
  - xfs: shut down filesystem if we xfs_trans_cancel with deferred work items
  - xfs: fix maxlevels comparisons in the btree staging code
  - xfs: sb verifier doesn't handle uncached sb buffer
  - xfs: fallocate() should call file_modified()
  - xfs: remove XFS_PREALLOC_SYNC
  - xfs: shutdown during log recovery needs to mark the log shutdown
  - xfs: xfs_trans_commit() path must check for log shutdown
  - xfs: xfs_do_force_shutdown needs to block racing shutdowns
  - xfs: log shutdown triggers should only shut down the log
  - xfs: shutdown in intent recovery has non-intent items in the AIL
  - xfs: AIL should be log centric
  - xfs: increase rename inode reservation
  - xfs: trim the mapp array accordingly in xfs_da_grow_inode_int
  - xfs: check return codes when flushing block devices
  - xfs: remove xfs_blkdev_issue_flush
  - xfs: fix NULL pointer dereference in xfs_getbmap()


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.116.0.143
changelog:
  - !2717 [sync] PR-2678:  io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2739 [sync] PR-2443:  CVE-2023-37453
  - !2733 [sync] PR-2688:  nvmet-tcp: Fix a possible UAF in queue intialization setup
  - USB: core: Fix oversight in SuperSpeed initialization
  - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
  - USB: core: Change usb_get_device_descriptor() API
  - USB: core: Unite old scheme and new scheme descriptor reads
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
  - !2701 [sync] PR-2672:  fix CVE-2023-46813
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
  - !2710 [sync] PR-2694:  LoongArch: add 32/64 pc relative relocation type support
  - !2664 [sync] PR-2579:  LoongArch: default IPMI related defconfig to m
  - LoongArch: Add support for 64_PCREL relocation type
  - LoongArch: Add support for 32_PCREL relocation type
  - LoongArch: Define relocation types for ABI v2.10
  - !2644 [sync] PR-2543:  psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n
  - x86/sev: Check for user-space IOIO pointing to kernel space
  - x86/sev: Check IOBM for IOIO exceptions from user-space
  - x86/sev: Disable MMIO emulation from user mode
  - LoongArch: default IPMI related defconfig to m
  - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n


author: Jialin Zhang <zhangjialin11@huawei.com> - 5.10.0-60.117.0.144
changelog:
  - !2860  bugfix for CVE-2022-45884
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
  - media: dvbdev: fix error logic at dvb_register_device()
  - media: dvbdev: Fix memleak in dvb_register_device
  - !2846 [sync] PR-2840:  drm/qxl: fix UAF on handle creation
  - drm/qxl: fix UAF on handle creation
  - !2800 [sync] PR-2782:  cpufreq: Abort show()/store() for half-initialized policies
  - cpufreq: make interface functions and lock holding state clear
  - cpufreq: Abort show()/store() for half-initialized policies


author: jintang song<jintang.song@epro.com.cn> - 8.0.29-1
changelog:
  - Upgrade mysql to 8.0.29,fix CVES:'CVE-2022-21423 CVE-2022-21451 
    CVE-2022-21444 CVE-2022-21460 CVE-2022-21417 CVE-2022-21427 CVE-2022-21414 
    CVE-2022-21435 CVE-2022-21452 CVE-2022-21413 CVE-2022-21462 CVE-2022-21412 
    CVE-2022-21415 CVE-2022-21437 CVE-2022-21438 CVE-2022-21436 CVE-2022-21418 
    CVE-2022-21459 CVE-2022-21478 CVE-2022-21479 CVE-2022-21440 CVE-2022-21425 
    CVE-2022-21457 CVE-2022-21454 CVE-2022-21483 CVE-2022-21482 CVE-2022-21484 
    CVE-2022-21485 CVE-2022-21486 CVE-2022-21489 CVE-2022-21490


author: chenhaixing <chenhaixing@huawei.com> - 1.26.7-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fix socket timeout value when HTTPConnect is reused
         remove Exclamation mark character from the unreserved characters
         fix _idna_encode handling of x80


author: Funda Wang <fundawang@yeah.net> - 1.26.7-7
changelog:
  - Type:CVE
  - CVE:CVE-2023-43804
  - SUG:NA
  - DESC:fix CVE-2023-43804 added the Cookie to the list of headers


author: chengyechun <chengyehcun1@huawei.com> - 1.26.7-8
changelog:
  - Type:CVE
  - CVE:CVE-2023-45803
  - SUG:NA
  - DESC:fix CVE-2023-45803 Made body stripped from HTTP requests


author: lijian<lijian2@kylinos.cn> - 1:1.5.2-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:rebuild for golang CVE-2023-24534,CVE-2023-24536,CVE-2023-24537,CVE-2023-24538


